Patch: Mandrake Linux usermode flaw

According to an alert from Mandrake Linux, "The /usr/bin/shutdown command that comes with the usermode package can be executed by local users to shutdown all running processes and drop into a root shell. This command is not really needed to shutdown a system, so it has been removed and all users are encouraged to upgrade."

The updated packages are available at: http://www.mandrakesecure.net/en/advisories/ advisory.php?name=MDKSA-2003:031

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

More about Mandrake

Show Comments